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DETAILED ACTION 

This is the first Office action in response to Application 10/635,587 filed on 
August 6, 2003. Claims 1-20 have been examined and are pending. 

Information Disclosure Statement 

1. The information disclosure statement (IDS) submitted on August 6, 
2003 is in compliance with the provisions of 37 CFR 1.97. Accordingly, the 
information disclosure statement has been considered by the examiner. 

Claim Rejections - 35 USC §102 

2. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in 
this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country 
or in public use or on sale in this country, more than one year prior to the date of application 
for patent in the United States. 

3. Claims 1-20 are rejected under 35 U.S.C. 102(b) as being anticipated 
by US Patent Number 6,167,445 to Gai et al ('Gai' hereinafter). Examiner 
interprets "stimuli" and "response" in light of the applicant's disclosure (pg. 
9, par. [0018]). 
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Regarding claim 1, Gai discloses a system for autonomically 
assisting in the creation of an administrative policy comprising: a 
systems administration component coupled to a system under study 

(Column 9, lines 51-55; Gai discloses the present invention 
provides a method and apparatus for allowing network 
administrators, i.e. systems administrators, to apply high-level 
traffic management policies, i.e. administrative policy, that 
attempt to impose such a uniform plan, despite the presence of 
dissimilar intermediate devices in their networks, i.e. system 

understudy. ) ; a workflow component configured for communicative 
linkage to a plurality of policy makers, said workflow component 
comprising a further configuration for routing stimuli and response 
data from said system under study to a selected one of said policy 

makers (Abstract, see also col. 5, line 64-col. 6, line 2; Gai 
discloses a computer network, i.e. systems under study, having 
multiple, dissimilar network devices includes a system for 
implementing high-level, network policies. The high-level 
policies, i.e. stimuli and response, which are generally device- 
independent, are translated by one or more policy servers, i.e. 
policy makers, into a set of rules that can be put into effect 
by specific network devices .); and, a policy generation component 
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coupled to said workflow component and configured to generate an 
administrative policy for administering said system under study 
based upon data collected from said selected one of said policy 
makers for said stimuli and response data (Abstract, see also col. 

6, lines 12-17; Gai further discloses policy server, i.e. policy 
maker, translates the high-level policies, i.e. stimuli and 
response, inherent in the selected traffic template and 
location-specific policies into a set of rules, which may 
include one or more access control lists, and may combine 
several related rules into a single transaction.). 

Regarding claim 2, Gai discloses the system of claim 1, further 
comprising a data store of stimuli and responses in said system 

understudy (Fig. 4; Col. 14, line 57-62; Gai further discloses 
policy tables may be stored by the policy translator at its 
storage devices numbered 412a-412c in figure 4. It should be 
further understood that the policy generator may also generate 
and store additional data structures in response.). 

Regarding claim 3, Gai discloses a method for autonomically 
assisting in the creation of an administrative policy comprising: 
detecting a stimuli in a system under study and monitoring a 
response by a systems administrator to said stimuli (Column 9, 

lines 51-55; Gai discloses the present invention provides a 
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method and apparatus for allowing network administrators, i.e. 
systems administrators, to apply high-level traffic management 
policies that attempt to impose such a uniform plan, despite the 
presence of dissimilar intermediate devices in their networks. 
Col. 12, lines 1-5; The traffic types for a given template are 
preferably derived from empirical studies and analysis of the 
computer network operations and usages of such industries and 

organizations . ) ; forwarding said stimuli and said response to a 
policy maker suited to analyze said stimuli and said response (Col. 

9, lines 55-57; Gai discloses the traffic management policies, 
moreover, may be automatically propagated to and implemented by 
the various intermediate devices . ); querying said policy maker for 
a preferred response to said stimuli (Col. 7, lines 10-19; Gai 

discloses in the preferred embodiment, the policy servers and 
intermediate devices utilize an extension to the Common Open 
Policy Service (COPS) protocol to exchange messages. More 
specifically, an intermediate device sends a Query Configuration 
message to, i.e. gueries, the policy server that contains 
specific information about itself, such as the number and type 
of interfaces, whether the device is at a boundary of the 
intermediate domain and/or whether its interfaces are coupled to 
trusted or un-trusted devices .); and, formulating a policy for 
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responding to said stimuli based upon said preferred response (Col. 

7, lines 21-24; Gai discloses the policy server selects a 
particular set of transactions or rules, i.e. formulates a 
policy, responsive to the device-specific information and 
provides them to the intermediate device.). 

Regarding claim 4, Gai discloses the method of claim 3, further 
comprising the step of enforcing said policy in managing said system 

understudy (Col. 4, lines 62-64; Traffic entering the service 
provider's network is monitored (i.e., " policed" or enforced) 
to ensure that it complies with the relevant traffic specifiers 
and is thus "in-prof ile" . ) . 

Regarding claim 5, Gai discloses the method of claim 3, further 
comprising the step of forwarding said policy to said systems 

administrator (Col. 12, lines 6-11; Policy information is 
viewable by the administrator via the graphical user interface. 
The administrator can monitor or make changes to the policy 
information from this window.). 

Regarding claim 6, Gai discloses the method of claim 3, further 
comprising the step of storing said stimuli and response in a data 

Store for subsequent analysis (Fig. 4; Col. 14, line 57-62; Gai 
further discloses policy tables may be stored by the policy 
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translator at its storage devices numbered 412a-412c in figure 
4. It should be further understood that the policy generator may 
also generate and store additional data structures in response.). 

Regarding claim 7, Gai discloses the method of claim 3, further 
comprising the steps of: monitoring the performance of said system 
under study in respect to said policy (Col . 12, lines 6-11; Policy 

information is viewable by the administrator via the graphical 
user interface. The administrator can monitor or make changes 
to the policy information from this window .); and, reporting said 

monitored performance to at least one of said systems administrator 

and said policy maker (Col. 12, lines 6-ll; Policy information is 
viewable by the administrator via the graphical user interface. 
The administrator can monitor or make changes to the policy 
information from this window.). 

Regarding claim 8, Gai discloses the method of claim 3, where said 
forwarding step comprises the steps of: identifying a policy maker 
among a plurality of policy makers, said identified policy maker 
having an association with at least one of said system under study, 

said Stimuli and said response (Abstract, see also col. 5, line 64- 
col. 6, line 2; Gai discloses a computer network, i.e. systems 
under study, having multiple, dissimilar network devices 
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includes a system for implementing high-level, network policies. 
The high-level policies, i.e. stimuli and response, which are 
generally device-independent, are translated by one or more 
policy servers, i.e. policy makers, into a set of rules that can 
be put into effect by specific network devices .); and, routing 

said stimuli and response to said identified policy maker (Abstract, 

see also col. 6, lines 12-17; Gai further discloses policy 
server, i.e. policy maker, translates the high-level policies, 
i.e. stimuli and response, inherent in the selected traffic 
template and location-specific policies into a set of rules, 
which may include one or more access control lists, and may 
combine several related rules into a single transaction.). 

Regarding claim 9, Gai discloses the method of claim 3, where said 
forwarding step comprises the steps of: identifying a policy maker 
among a plurality of policy makers (Abstract, see also col. 5, 

line 64-col. 6, line 2; Gai discloses a computer network, i.e. 
systems under study, having multiple, dissimilar network devices 
includes a system for implementing high-level, network policies. 
The high-level policies, i.e. stimuli and response, which are 
generally device-independent, are translated by one or more 
policy servers, i.e. policy makers, into a set of rules that can 
be put into effect by specific network devices .), said identified 
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policy maker having knowledge of another policy maker among said 

plurality Of policy makers (Abstract, see also col. 5, line 64-col. 
6, line 2; Gai discloses a computer network, i.e. systems under 
study, having multiple, dissimilar network devices includes a 
system for implementing high-level, network policies. The high- 
level policies, i.e. stimuli and response, which are generally 
device-independent, are translated by one or more policy 
servers, i.e. policy makers, into a set of rules that can be put 
into effect by specific network devices . ), said another policy 

maker having an association with at least one of said system under 

Study (Abstract, see also col. 5, line 64-col. 6, line 2; Gai 
discloses a computer network, i.e. systems under study, having 
multiple, dissimilar network devices includes a system for 
implementing high-level, network policies. The high-level 
policies, i.e. stimuli and response, which are generally device- 
independent, are translated by one or more policy servers, i.e. 
policy makers, into a set of rules that can be put into effect 

by specific network devices .), said stimuli and said response 

(Abstract, see also col. 5, line 66; Gai discloses the high- 
level policies, i.e. stimuli and response .); and, routing said 

stimuli and response to said identified policy maker, said identified 
policy maker further routing said stimuli and response to said 
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another policy maker (Abstract, see also col. 6, lines 12-17; Gai 
further discloses policy server, i.e. policy maker, translates 
the high-level policies, i.e. stimuli and response, inherent in 
the selected traffic template and location-specific policies 
into a set of rules, which may include one or more access 
control lists, and may combine several related rules into a 
single transaction.). 

Regarding claim 10, Gai discloses the method of claim 3, wherein 
said querying step further comprises the step of querying said policy 
maker for at least one of an identity of a related stimuli, an identity 
of a related response, and an identity of a related system to which 

said policy Can apply (Col. 7, lines 10-19; Gai discloses in the 
preferred embodiment, the policy servers and intermediate 
devices utilize an extension to the Common Open Policy Service 
(COPS) protocol to exchange messages. More specifically, an 
intermediate device sends a Query Configuration message to, i.e. 
queries, the policy server that contains specific information 
about itself, such as the number and type of interfaces, whether 
the device is at a boundary of the intermediate domain and/or 
whether its interfaces are coupled to trusted or un-trusted 
devices . ) . 
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Regarding claim 11, Gai discloses the method of claim 10, wherein 
the formulating step further comprises formulating said policy 
additionally based upon said at least one of said identity of said 
related stimuli, said identity of said related response, and said 
identity of said related system to which said policy can apply (Col. 

7, lines 21-24; Gai discloses the policy server selects a 
particular set of transactions or rules, i.e. formulates a 
policy, responsive to the device-specific information and 
provides them to the intermediate device.). 

Regarding claim 12, Gai discloses a machine readable storage 
having stored thereon a computer program for autonomically 
assisting in the creation of an administrative policy, the computer 
program comprising a routine set of instructions for causing the 

machine to perform the Steps Of (Col . 9, lines 4-7; Gai discloses 
elements of this embodiment further comprise programmable 
processing elements, which may contain software programs 
pertaining to the methods described herein. Other computer 
readable media may also be used to store the program 

instructions . ) : detecting a stimuli in a system under study and 
monitoring a response by a systems administrator to said stimuli 

(Column 9, lines 51-55; Gai discloses the present invention 
provides a method and apparatus for allowing network 
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administrators, i.e. systems administrators, to apply high-level 
traffic management policies that attempt to impose such a 
uniform plan, despite the presence of dissimilar intermediate 
devices in their networks. Col. 12, lines 1-5; The traffic types 
for a given template are preferably derived from empirical 
studies and analysis of the computer network operations and 
usages of such industries and organizations .); forwarding said 

stimuli and said response to a policy maker suited to analyze said 

Stimuli and said response (Col. 9, lines 55-57; Gai discloses the 
traffic management policies, moreover, may be automatically 
propagated to and implemented by the various intermediate 
devices . ) ; querying said policy maker for a preferred response to 

said Stimuli (Col. 7, lines 10-19; Gai discloses in the preferred 
embodiment, the policy servers and intermediate devices utilize 
an extension to the Common Open Policy Service (COPS) protocol 
to exchange messages. More specifically, an intermediate device 
sends a Query Configuration message to, i.e. queries, the policy 
server that contains specific information about itself, such as 
the number and type of interfaces, whether the device is at a 
boundary of the intermediate domain and/or whether its 
interfaces are coupled to trusted or un-trusted devices .); and, 

formulating a policy for responding to said stimuli based upon said 
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preferred response (Col. 7, lines 21-24; Gai discloses the policy 
server selects a particular set of transactions or rules, i.e. 
formulates a policy, responsive to the device-specific 
information and provides them to the intermediate device.). 

Regarding claim 13, Gai discloses the machine readable storage of 
claim 12, further comprising the step of enforcing said policy in 
managing said system under study (Col . 4, lines 62-64; Traffic 

entering the service provider's network is monitored (i.e., 
"policed" or enforced) to ensure that it complies with the 
relevant traffic specifiers and is thus "in-prof ile" . ) . 

Regarding claim 14, Gai discloses the machine readable storage of 
claim 12, further comprising the step of forwarding said policy to 
said systems administrator (col . 12, lines 6-11; Policy 

information is viewable by the administrator via the graphical 
user interface. The administrator can monitor or make changes 
to the policy information from this window.). 

Regarding claim 15, Gai discloses the machine readable storage of 
claim 12, further comprising the step of storing said stimuli and 
response in a data store for subsequent analysis (Fig. 4; col. 14, 

line 57-62; Gai further discloses policy tables may be stored by 
the policy translator at its storage devices numbered 412a-412c 
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in figure 4. It should be further understood that the policy 
generator may also generate and store additional data structures 
in response . ) . 

Regarding claim 16, Gai discloses the machine readable storage of 
claim 12, further comprising the steps of: monitoring the 
performance of said system under study in respect to said policy 

(Col. 12, lines 6-11; Policy information is viewable by the 
administrator via the graphical user interface. The 
administrator can monitor or make changes to the policy 

information from this window.); and, reporting said monitored 
performance to at least one of said systems administrator and said 

policymaker (Col. 12, lines 6-ll; Policy information is viewable 
by the administrator via the graphical user interface. The 
administrator can monitor or make changes to the policy 
information from this window.). 

Regarding claim 17, Gai discloses the machine readable storage of 
claim 12, where said forwarding step comprises the steps of: 
identifying a policy maker among a plurality of policy makers, said 
identified policy maker having an association with at least one of 
said system under study, said stimuli and said response (Abstract, 

see also col. 5, line 64-col. 6, line 2; Gai discloses a 
computer network, i.e. systems under study, having multiple, 
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dissimilar network devices includes a system for implementing 
high-level, network policies. The high-level policies, i.e. 
stimuli and response, which are generally device-independent, 
are translated by one or more policy servers, i.e. policy 
makers, into a set of rules that can be put into effect by 
specific network devices . ); and, routing said stimuli and response 

to said identified policy maker (Abstract, see also col. 6, line 12- 
17; Gai further discloses policy server, i.e. policy maker, 
translates the high-level policies, i.e. stimuli and response, 
inherent in the selected traffic template and location-specific 
policies into a set of rules, which may include one or more 
access control lists, and may combine several related rules into 
a single transaction.). 

Regarding claim 18, Gai discloses the machine readable storage of 
claim 12, where said forwarding step comprises the steps of: 
identifying a policy maker among a plurality of policy makers 

(Abstract, see also col. 5, line 64-col. 6, line 2; Gai 
discloses a computer network, i.e. systems under study, having 
multiple, dissimilar network devices includes a system for 
implementing high-level, network policies. The high-level 
policies, i.e. stimuli and response, which are generally device- 
independent, are translated by one or more policy servers, i.e. 
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policy makers, into a set of rules that can be put into effect 
by specific network devices . ), said identified policy maker having 
knowledge of another policy maker among said plurality of policy 

makers (Abstract, see also col. 5, line 64-col. 6, line 2; Gai 
discloses a computer network, i.e. systems under study, having 
multiple, dissimilar network devices includes a system for 
implementing high-level, network policies. The high-level 
policies, i.e. stimuli and response, which are generally device- 
independent, are translated by one or more policy servers, i.e. 
policy makers, into a set of rules that can be put into effect 

by specific network devices .), said another policy maker having an 
association with at least one of said system under study (Abstract, 

see also col. 5, line 64-col. 6, line 2; Gai discloses a 
computer network, i.e. systems under study, having multiple, 
dissimilar network devices includes a system for implementing 
high-level, network policies. The high-level policies, i.e. 
stimuli and response, which are generally device-independent, 
are translated by one or more policy servers, i.e. policy 
makers, into a set of rules that can be put into effect by 

specific network devices .) , said stimuli and said response 

(Abstract, see also col. 5, line 66; Gai discloses the high- 
level policies, i.e. stimuli and response .); and, routing said 
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stimuli and response to said identified policy maker, said identified 
policy maker further routing said stimuli and response to said 

another policy maker (Abstract, see also col. 6, lines 12-17; Gai 
further discloses policy server, i.e. policy maker, translates 
the high-level policies, i.e. stimuli and response, inherent in 
the selected traffic template and location-specific policies 
into a set of rules, which may include one or more access 
control lists, and may combine several related rules into a 
single transaction.). 

Regarding claim 19, Gai discloses the machine readable storage of 
claim 12, wherein said querying step further comprises the step of 
querying said policy maker for at least one of an identity of a related 
stimuli, an identity of a related response, and an identity of a related 
system to which said policy can apply (Col . 7, lines 10-19; Gai 

discloses in the preferred embodiment, the policy servers and 
intermediate devices utilize an extension to the Common Open 
Policy Service (COPS) protocol to exchange messages. More 
specifically, an intermediate device sends a Query Configuration 
message to, i.e. queries, the policy server that contains 
specific information about itself, such as the number and type 
of interfaces, whether the device is at a boundary of the 



Application/Control Number: 10/635,587 Page 18 

Art Unit: 4121 

intermediate domain and/or whether its interfaces are coupled to 
trusted or un-trusted devices.)- 

Regarding claim 20, Gai discloses the machine readable storage of 
claim 19, wherein the formulating step further comprises 
formulating said policy additionally based upon said at least one of 
said identity of said related stimuli, said identity of said related 
response, and said identity of said related system to which said 

policy can apply (Col. 7, lines 21-24; Gai discloses the policy 
server selects a particular set of transactions or rules, i.e. 
formulates a policy, responsive to the device-specific 
information and provides them to the intermediate device.). 
Conclusion 

4. The prior art made of record and not relied upon is considered 
pertinent to applicant's disclosure: 

• US Patent Number 5,889,953 to Thebaut et al titled "Policy 
Management and Conflict Resolution in Computer Networks." 

• US Patent Number 6,412,000 to Riddle et al titled "Method for 
Automatically Classifying Traffic in a Packet Communications 
Network." 

• US Patent Number 6,484,261 to Wiegel titled "Graphical Network 
Security Policy Management." 
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• US Patent Publication Number 2003/0041131 to Westerinen et al 
titled "System and Method to Automate the Management of 
Computer Services and Programmable Devices." 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Tariq S. Najee-ullah whose 
telephone number is (571) 270-5013. The examiner can normally be 
reached on Monday through Friday 8:00 - 5:30 EST. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Taghi T. Arani can be reached on (571) 272-3787. 
The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either Private 
PAIR or Public PAIR. Status information for unpublished applications is 
available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 

TN 

/Taghi T. Arani/ 

Supervisory Patent Examiner, Art Unit 4121 
12/4/2007 



